Effective date: 4 May 2026
Peck ("the App") is a personal meal-tracking and nutrition app developed by Kelvin Harron ("we", "us", "our"). The data controller is Kelvin Harron, contactable at kelvinharron+peckapp@gmail.com. We believe your health data is yours. This policy explains what data the App collects, how it is used, and the choices you have.
The vast majority of your data never leaves your device. The following is stored locally in a private database and file storage accessible only to the App:
Your name and date of birth are used only on your device, for personalised greetings and for calculating nutrition targets. They are never transmitted to us or to any third-party service.
The App does not use the Apple Advertising Identifier (IDFA) and does not present an App Tracking Transparency prompt because it does not track you. Where third-party services need to distinguish one installation from another, the following anonymous identifiers are used:
None of these identifiers are shared between services, and none can be linked back to you as a person.
The following services receive data only when triggered by your direct action in the App. No data is sent in the background, and no personal or identifying information accompanies these requests.
The App's AI features (text and photo nutrition estimation, weekly insights) are powered by Google's Gemini models, accessed through Firebase AI Logic. Data is sent only when you explicitly trigger one of these features:
These requests do not include your name, date of birth, email, or any other personally identifying information. The App does not send any of this data automatically or in the background. Requests are processed by Google under the Google Privacy Policy and by Firebase under the Firebase Privacy and Security documentation. AI features are optional and the App remains fully usable without them.
AI content is not medical advice. Nutrition estimates and weekly insights are generated by an AI model and may be inaccurate or incomplete. They are intended as a guide only and should not be relied on for medical, dietary, or clinical decisions. Always consult a qualified professional for health advice.
When you search for a food item or scan a barcode, the App queries the Open Food Facts public API. The data sent is limited to:
No personal or identifying information is included in these requests.
With your explicit permission, the App can read and write health data via Apple HealthKit (iOS) or Health Connect (Android):
This data is exchanged directly with the operating system's health platform on your device. You can revoke these permissions at any time in your device's Health settings.
The App uses two services to understand product usage and to diagnose technical issues:
All analytics and diagnostic data is associated only with the anonymous identifiers described in Section 2. No name, date of birth, email, meal content, photos, or health data is included in analytics or crash events.
The App does not perform app-wide tracking of your behaviour, does not link any data to data collected by other companies' apps or websites, and does not share analytics data with advertisers or data brokers.
In-app purchases and subscriptions are processed through Apple's App Store or Google Play. We use RevenueCat to manage subscription status and entitlements. RevenueCat receives an anonymous app-level user identifier and the purchase metadata returned by the store; it does not receive your name, date of birth, email, or payment details. We do not see or store your payment details. See the RevenueCat Privacy Policy.
The App can send local notifications (meal reminders, weekly check-in prompts) if you enable them. These notifications are generated entirely on your device. No data is sent to any external push notification service.
The App requests access to your camera for barcode scanning and meal photos, and to your photo library for selecting existing images. Photos you take or select are stored locally within the App. They are only sent externally if you use the AI nutrition estimation feature (see Section 3).
The App is not directed at children under 13 and is rated for users aged 16 and over. We do not knowingly collect data from children. If you are a parent or guardian and believe a child has used the App, please contact us at the address in Section 13 and we will assist you with deleting any data on the device.
Since your personal data is stored locally on your device:
Data previously sent to third-party APIs is otherwise subject to those services' respective retention policies, linked throughout this policy.
Depending on where you live (for example under the UK GDPR, EU GDPR, or California Consumer Privacy Act), you may have the right to access, correct, delete, restrict, or object to processing of your personal information, and the right to data portability. Because the App stores your personal data locally on your device, you can exercise most of these rights directly inside the App. For data held by third-party services, contact us at the address in Section 13 and we will help you exercise these rights.
Your data is stored in the App's private sandboxed storage, which is protected by your device's operating system. We do not transmit data over unencrypted connections - all third-party API communication uses HTTPS.
We may update this policy from time to time. Material changes will be noted with a revised effective date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.
If you have questions about this policy or your data, or wish to exercise any of the rights described in Section 10, you can reach us at:
kelvinharron+peckapp@gmail.com